Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nntw5fE8AZx_u1LNiVHTMW3zdCo.roa
File: nntw5fE8AZx_u1LNiVHTMW3zdCo.roa (raw, json)
Hash identifier: Q1tiXX6pFmHqPzCiOMvVvelZBDoQD2pfZE1oY8CqBn0=
Subject key identifier: 9E:7B:70:E5:F1:3C:01:9C:7F:BB:52:CD:89:51:D3:31:6D:F3:74:2A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DCD882EF3066A143ECC8622F49270CDFB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nntw5fE8AZx_u1LNiVHTMW3zdCo.roa
Signing time: Mon 27 Apr 2026 06:02:27 +0000
ROA not before: Mon 27 Apr 2026 06:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198588
IP address blocks: 79.175.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:88:2e:f3:06:6a:14:3e:cc:86:22:f4:92:70:cd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 27 06:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e7b70e5f13c019c7fbb52cd8951d3316df3742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:ad:0f:e7:8a:34:58:63:e0:7f:91:3f:75:
2d:3b:9f:f2:6c:ea:c5:a1:2d:b0:71:61:90:4f:33:
aa:e6:6f:a3:40:d9:53:54:5a:ef:e3:fa:f7:ec:e2:
e7:63:2d:75:22:f1:e6:fa:18:00:54:81:d9:a0:86:
7f:fd:d4:60:0b:5a:8f:c0:a9:1d:c3:36:d6:8b:13:
99:cc:fb:e5:cf:6e:f8:4f:75:3a:78:74:ea:6c:ac:
ec:4e:13:9b:ac:87:c2:23:53:46:09:27:4f:db:55:
d4:1c:49:86:3d:cb:d1:54:5f:6e:8a:5d:33:a1:25:
82:83:39:d6:b8:f7:7f:7b:42:87:55:4f:ef:22:5f:
48:ac:56:81:18:75:ea:d5:d0:bd:c9:89:4c:73:59:
56:89:20:a3:f3:fa:62:4b:11:71:13:51:26:31:3e:
7b:f0:81:4e:07:08:ba:01:8d:f4:6f:b5:01:55:06:
11:3a:44:b2:67:2d:b9:27:07:ef:ec:b4:0e:f5:be:
9d:93:ef:d2:a3:f5:cc:9a:49:4d:b7:e9:8c:c9:ab:
10:31:78:aa:f0:d6:de:60:51:9b:42:56:2b:a6:8e:
7d:09:d4:6d:39:ce:dd:1c:16:53:ff:5e:5a:70:f1:
d4:be:48:3c:dd:d7:c2:b6:7f:f4:ac:df:67:42:a9:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7B:70:E5:F1:3C:01:9C:7F:BB:52:CD:89:51:D3:31:6D:F3:74:2A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/nntw5fE8AZx_u1LNiVHTMW3zdCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.118.0/24
Signature Algorithm: sha256WithRSAEncryption
75:08:37:3c:2e:cc:62:f4:01:89:e0:22:e8:fa:47:d2:48:c2:
fc:e0:57:a7:d6:af:fc:60:20:39:21:58:f4:02:5b:ce:fd:a0:
da:52:c2:2b:1b:89:69:b6:4f:cc:30:46:cf:69:b0:86:3b:f9:
fc:d6:2b:6a:29:f6:e3:b1:f7:bf:3d:ef:98:2f:58:b4:b9:f9:
db:81:85:af:a2:d9:ba:2c:ed:25:a8:54:84:6f:6c:2a:c2:e7:
51:9a:1e:35:8e:2c:f7:3d:2b:05:d0:64:ca:0e:55:4d:3a:bb:
ea:76:28:38:c0:6c:f0:21:da:ad:3d:7b:0d:26:ea:a4:2a:bc:
20:0f:d3:62:8a:3c:c4:f9:a2:8c:16:45:26:fb:10:b6:29:d5:
3a:b0:28:51:52:cb:37:77:72:41:f6:4d:f1:64:d9:03:53:9e:
98:e6:10:dd:fb:41:4e:0e:c3:ba:68:1a:1d:2c:08:24:24:ef:
55:09:ea:5c:1f:33:cf:87:f9:41:04:64:22:5b:7c:4e:a6:a5:
bc:8e:ab:ee:1d:fc:0c:23:0d:f8:e1:88:12:cf:33:63:fd:91:
ad:c5:99:c5:2a:94:79:03:15:36:e3:f0:82:52:f0:1f:96:a1:
f3:9a:ad:ea:93:4f:3e:c4:04:d8:3a:c3:a2:9b:3a:79:f7:11:
1f:52:a5:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3NiC7zBmoUPsyGIvSScM37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNDI3MDYwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTdiNzBlNWYxM2MwMTljN2ZiYjUyY2Q4OTUxZDMzMTZkZjM3NDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxitD+eKNFhj4H+RP3UtO5/ybOrF
oS2wcWGQTzOq5m+jQNlTVFrv4/r37OLnYy11IvHm+hgAVIHZoIZ//dRgC1qPwKkd
wzbWixOZzPvlz274T3U6eHTqbKzsThObrIfCI1NGCSdP21XUHEmGPcvRVF9uil0z
oSWCgznWuPd/e0KHVU/vIl9IrFaBGHXq1dC9yYlMc1lWiSCj8/piSxFxE1EmMT57
8IFOBwi6AY30b7UBVQYROkSyZy25Jwfv7LQO9b6dk+/So/XMmklNt+mMyasQMXiq
8NbeYFGbQlYrpo59CdRtOc7dHBZT/15acPHUvkg83dfCtn/0rN9nQqmY5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ57cOXxPAGcf7tSzYlR0zFt83QqMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvbm50dzVmRThBWnhfdTFMTmlWSFRNVzN6ZENvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT692MA0G
CSqGSIb3DQEBCwUAA4IBAQB1CDc8Lsxi9AGJ4CLo+kfSSML84Fen1q/8YCA5IVj0
AlvO/aDaUsIrG4lptk/MMEbPabCGO/n81itqKfbjsfe/Pe+YL1i0ufnbgYWvotm6
LO0lqFSEb2wqwudRmh41jiz3PSsF0GTKDlVNOrvqdig4wGzwIdqtPXsNJuqkKrwg
D9NiijzE+aKMFkUm+xC2KdU6sChRUss3d3JB9k3xZNkDU56Y5hDd+0FODsO6aBod
LAgkJO9VCepcHzPPh/lBBGQiW3xOpqW8jqvuHfwMIw344YgSzzNj/ZGtxZnFKpR5
AxU24/CCUvAflqHzmq3qk08+xATYOsOimzp59xEfUqV4
-----END CERTIFICATE-----
Generated at Thu May 7 05:38:32 2026 by rpki-client